Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C47242B4D9CF11EFB4D33965762E951A.roa
File: C47242B4D9CF11EFB4D33965762E951A.roa (raw, json)
Hash identifier: 76uO6SgAPrHpZQNVH83tH0Gyp3Nv9oZ2+z0XQ0b0KHk=
Subject key identifier: D5:3F:03:F5:D4:F2:02:DF:00:62:D6:26:F1:4C:62:E7:78:4E:63:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014307
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C47242B4D9CF11EFB4D33965762E951A.roa
Signing time: Thu 23 Jan 2025 21:19:45 +0000
ROA not before: Fri 24 Jan 2025 21:19:41 +0000
ROA not after: Fri 28 Feb 2025 21:19:41 +0000
asID: 62240
IP address blocks: 154.196.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82695 (0x14307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:19:41 2025 GMT
Not After : Feb 28 21:19:41 2025 GMT
Subject: CN=6792b271-d170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:76:51:bf:42:81:31:2a:2f:72:3e:37:47:
6b:05:65:bc:03:25:5e:84:65:61:b1:9b:ea:f3:6b:
d7:b8:bb:11:c2:35:32:87:e1:6b:6e:4d:22:05:21:
1b:2d:7f:43:b9:bf:d3:27:89:0e:d5:39:21:d9:0f:
d2:a5:90:d9:87:63:33:af:1a:ea:2b:e1:e1:3a:88:
66:da:9b:da:2b:0d:2d:38:ed:93:e8:38:f9:b9:41:
89:f1:e0:fa:2e:1a:14:04:7f:c8:e9:1b:22:73:70:
8e:91:d9:9a:2f:b3:6e:f1:47:9c:90:3f:ae:f1:0f:
c0:02:6a:ff:fc:c5:ff:27:f2:05:2f:fe:07:0f:67:
70:bd:f4:58:62:71:db:1a:ec:a1:01:ac:61:26:62:
26:3d:c2:23:b4:d2:66:83:ea:2c:df:aa:c4:e2:1a:
d4:9d:cc:b2:9b:65:b1:13:03:9a:bc:c1:ac:3b:e8:
37:a2:ca:d9:e8:81:1b:d9:b3:32:dd:68:99:c5:f4:
11:d4:45:01:2c:18:f0:3e:66:8f:10:d6:52:69:cb:
fb:47:fa:3e:c6:da:dd:03:3c:e0:fb:32:95:29:f8:
db:2f:d6:f7:04:e3:6a:43:0e:31:91:df:8b:8b:38:
20:33:fa:e8:21:d5:58:13:1e:c8:bb:38:e7:1e:f2:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3F:03:F5:D4:F2:02:DF:00:62:D6:26:F1:4C:62:E7:78:4E:63:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C47242B4D9CF11EFB4D33965762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.79.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:99:9c:f4:0f:79:26:4c:01:c2:c0:87:a4:00:2a:1a:dd:36:
38:fc:de:0b:f7:31:b9:78:14:e5:8e:09:41:f7:12:5b:68:0a:
86:22:69:d3:37:38:ff:c0:a8:88:94:41:d2:1c:53:0e:8f:4b:
f4:d4:32:49:68:22:f6:37:f7:c1:86:4c:3a:bb:ac:38:34:98:
ac:99:97:cb:af:ac:b9:af:7b:b0:20:49:01:f0:e8:03:a1:b3:
cb:3b:b1:88:5c:aa:60:bb:83:26:9e:8d:13:86:bf:b7:da:4e:
12:3f:47:06:01:51:de:7c:e0:20:59:e3:3d:9c:3a:6d:02:f0:
09:39:bb:d7:24:ce:3e:53:1e:61:cf:4f:fe:15:2e:b9:13:18:
2e:1c:f8:02:0b:85:9e:e8:54:a5:da:10:2e:f2:00:28:94:72:
dd:40:9b:c0:69:1a:a3:94:08:93:84:b1:4e:e2:c6:a5:13:87:
10:96:a8:94:60:79:27:56:9d:68:b9:0b:87:be:a0:ce:08:6f:
7c:44:33:d2:eb:a3:bc:bf:06:4f:a4:1b:2b:ba:04:33:bb:74:
69:53:52:dd:8b:42:9f:62:5a:21:0e:b4:30:2c:25:c1:9c:6a:
23:64:56:fd:24:9d:f7:fc:ee:b1:31:36:c3:22:de:d4:d3:86:
d7:49:42:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:17 2025 by rpki-client